What is Single Sign-On
Single Sign-On (SSO) is a secure, fast, and simple way to access and use all your work applications, including vWork, with a single set of login credentials. Log in once and access all apps you use each work session - no need to remember multiple passwords or open multiple login screens.
Single Sign-On is an optional vWork feature that works with Azure AD. If you would like to learn more about it or add it to your vWork account, please email support@vworkapp.com. A member of our team will be in touch to talk about your requirements.
SSO is only available for users of the vWork website. Users of our mobile apps are not able to use SSO at this time.
In this article
This article explains the process for setting up your vWork account to use Single Sign-On.
It includes:
- Is Single Sign-On right for my organization?
- Set up vWork for Single Sign-On
- Review Users’ details in vWork
If you want to find out how to log in or out of vWork using SSO then please read the article: Log in to vWork using Single Sign-On.
Is Single Sign-On right for my organization?
If your team uses multiple web-based applications in addition to vWork and these require multiple login credentials to access them, Single Sign-On is a great solution to simplify access to all these apps. SSO provides each team member with convenient and secure access to every application they use with one email and password and one login location for everything. Have your team work faster. Enable them to switch between vWork and other apps quickly, easily, and seamlessly.
Single Sign-On can also simplify things for your IT Administrator. With SSO it is simple to add and remove a user’s access to multiple apps as their role changes or if they leave the organization. Once you have SSO enabled, your IT Administrator can quickly turn off a user’s access to vWork and other apps in one place.
At present vWork supports SSO via the SAML2 Protocol exclusively through Azure Active Directory (Azure AD). We are working on enabling this service with other SSO Providers, such as Google and Okta, and aim to enable this soon.
Set up vWork for Single Sign-On
Before you begin
Before you can set up Single Sign-On in your vWork account you must:
- have set up an account with Azure AD.
- have your Azure AD’s IDP metadata information (either as an .XML file or a URL).
- have vWork add Single Sign-On to your vWork account. Get in touch with support@vworkapp.com and we can organize this for you.
- make sure each user in vWork has an account with Azure ID using the same email address that they will use to log on to vWork.
- We have more information explaining how to set up Azure AD for SSO here in the article, Set up SSO for vWork in Azure Active Directory.
Add the metadata information to vWork
There are two methods to add the metadata information to vWork. You can:
- upload an .XML file or
- enter the URL.
Upload an XML file
To enable Single Sign-On using an .XML file:
- Go to Settings>Integrations>Single Sign-On
- Check the checkbox next to Enable Single Sign-On.
- Click Select File then browse for the.xml file shared by Azure AD and upload this.
- Click Save.
Enter a URL
To enable Single Sign-On using your SSO Provider’s URL:
- Go to Settings>Integrations>Single Sign-On
- Check the checkbox next to Enable Single Sign-On.
- In the IDP metadata URL field, enter the IDP Metadata URL shared with you by Azure AD
- Click Save.
Review Users’ details in vWork
When you are done enabling SSO be sure to review your Users’ details. Make sure the email address the user has for vWork matches the email address they use to log in to Azure AD.
You can review and update your Users’ details in Settings>Users>Users. Open the User Details for each user from the User Management page.
Note: When using SSO, users who don’t have Mobile Permissions enabled have the Password field disabled in their User Details. Users with Mobile Permissions enabled still require a password to log in to their vWork mobile Android or iPhone app. The Password field is enabled for these users.